Merge pull request #4666 from jmcrawford45/oauth2_scope_config

Oauth2 scope config
Netflix · Oct 19, 2023 · 7378095 · 7378095
2 parents 889938a + 183d750
commit 7378095
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 1 deletion.
diff --git a/docs/administration.rst b/docs/administration.rst
@@ -1213,6 +1213,13 @@ For more information about how to use social logins, see: `Satellizer <https://g
 
             OAUTH2_VERIFY_CERT = True
 
+.. data:: OAUTH2_SCOPE
+    :noindex:
+
+        ::
+
+            OAUTH2_SCOPE = ["openid", "email", "profile", "groups"]
+
 .. data:: OAUTH_STATE_TOKEN_SECRET
     :noindex:
 

diff --git a/lemur/auth/views.py b/lemur/auth/views.py
@@ -725,7 +725,7 @@ def get(self):
                         "redirectUri": current_app.config.get("OAUTH2_REDIRECT_URI"),
                         "clientId": current_app.config.get("OAUTH2_CLIENT_ID"),
                         "responseType": "code",
-                        "scope": ["openid", "email", "profile", "groups"],
+                        "scope": current_app.config.get("OAUTH2_SCOPE", ["openid", "email", "profile", "groups"]),
                         "scopeDelimiter": " ",
                         "authorizationEndpoint": current_app.config.get(
                             "OAUTH2_AUTH_ENDPOINT"